Which of the following is an example of a quantitative metric used in Open FAIR?

Annualized Loss Expectancy (ALE) is a key quantitative metric within the Open FAIR framework, which is designed to provide a monetary value to the potential losses that an organization may face from identified risks over a year. ALE is calculated using the formula that combines the likelihood of a risk event occurring with the potential impact or loss associated with that event. This metric helps organizations assess and quantify the financial implications of risks, enabling them to prioritize risk management efforts based on potential economic impact.

In contrast, the total number of risks identified is a count of risks and does not offer a monetary evaluation. The percentage of risks mitigated indicates a proportion but still does not assign any financial value. Qualitative assessment ratings provide subjective evaluations that do not lend themselves to numerical analysis or quantification. Therefore, ALE stands out as the only option that provides a measurable and financial basis for understanding risk in a quantitative manner.